{"id":183554,"date":"2026-10-02T22:54:30","date_gmt":"2026-10-02T20:54:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/cloudflare-sozdayot-udostoveryayushhij-czentr-dlya-besplatnoj-razdachi-tls-sertifikatov"},"modified":"2026-10-02T22:54:35","modified_gmt":"2026-10-02T20:54:35","slug":"cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","title":{"rendered":"Cloudflare ustvarja overiteljski center za brezpla\u010dno distribucijo TLS-certifikatov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Podjetje Cloudflare je napovedalo ustanovitev lastnega potrjevalnega centra, ki bo osredoto\u010den na zagotavljanje brezpla\u010dnih TLS-certifikatov, ki uporabljajo kriptografske algoritme odporne na kvantno ra\u010dunalni\u0161tvo. Hkrati so napovedali nakup potrjevalnega centra GlobalSign, ki bo osnova za uresni\u010ditev na\u010drtovanega projekta in omogo\u010dila takoj\u0161nje izdajo certifikatov, za katere je zagotovljen maksimalen doseg naprav, zahvaljujo\u010d prisotnosti GlobalSign na obstoje\u010dih seznamih korenskih certifikatov. Poleg tega je podjetje Cloudflare oddalo prijave za vklju\u010ditev lastnega korenskega certifikata na sezname korenskih certifikatov, ki jih podpirajo Google, Apple, Microsoft in Mozilla. <\/p>\n

Predvideva se, da bo nova javna overiteljska agencija dopolnila storitev Let's Encrypt, katere dele\u017e med overiteljskimi agencijami zna\u0161a 39,2% vseh izdanih potrdil. Povezanost skoraj polovice spletnih strani z eno overiteljsko agencijo ustvarja sistemske tveganja v primeru okvar v delovanju Let's Encrypt zaradi pomanjkanja podobnih brezpla\u010dnih alternativ. Tako kot Let's Encrypt bo storitev Cloudflare popolnoma avtomatizirana in bo omogo\u010dala upravljanje s potrdili, pri \u010demer bo uporabljala odprti protokol ACME. Za pridobitev potrdila v storitvi Cloudflare bodo uporabnikom Let's Encrypt dovolj spremeniti URL v nastavitvah. <\/p>\n

Druga naloga novega potrjevalnega centra je priprava na prehod na postkvantno kriptografijo. V prvem \u010detrtletju leta 2027 namerava podjetje Cloudflare kot eno prvih uvesti v svojem potrjevalnem centru podporo poenostavljenemu formatu certifikatov MTC (Merkle Tree Certificates), ki je zasnovan za uporabo s postkvantnimi kriptografskimi algoritmi, pri \u010demer je velikost digitalnega podpisa pribli\u017eno 40-krat ve\u010dja od velikosti tradicionalnih podpisov. <\/p>\n

Za zmanj\u0161anje velikosti podatkov pri vsakem TLS-povezovanju se v MTC uporablja drevesna struktura \u00bbMerklevo drevo\u00ab, v kateri vsaka veja overi vse spodnje veje in vozli\u0161\u010da zahvaljujo\u010d skupnemu (drevesnemu) he\u0161iranju. \u010ce tradicionalni pristop zahteva, da overiteljska agencija podpi\u0161e vsako potrdilo posebej, pa se pri uporabi MTC potrdila zdru\u017eijo in dodajo v dnevnik na podlagi Merklevega drevesa, koreninski he\u0161 pa se samo podpi\u0161e. S to shemo je mo\u017eno s kon\u010dnim he\u0161em preveriti, da je konkretno potrdilo vklju\u010deno v trenutno podpisano drevo. Pri povezovanju s spletno stranjo brskalnik prejme skraj\u0161ano MTC-potrdilo in nabor he\u0161ev za matemati\u010dno dokazovanje njegove vklju\u010ditve v drevo, kar omogo\u010da uporabniku, da preveri pristnost spletne strani na podlagi potrditve, da je potrdilo dejansko v podpisanem drevesu. <\/p>\n

Cloudflare bo podpiral tako tradicionalne kot tudi MTC-certifikate, kar bo uporabnikom omogo\u010dilo gladek prehod na nov format. Javna predstavitev projekta se pri\u010dakuje po zaklju\u010dku testiranja nove infrastrukture na notranjih storitvah Cloudflare. Cloudflare se zavezuje, da bo zagotovil popolno preglednost procesov v novem overitvenem centru, objavljal reproducibilne razli\u010dice programske opreme, uporabljene za oblikovanje digitalnih podpisov, izvajal akreditacijo varnostnih strojnih modulov (HSM), v katerih so shranjeni zasebni klju\u010di, in hitro razkrival informacije o te\u017eavah in incidentih.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u044b, \u0441\u0442\u043e\u0439\u043a\u0438\u0435 \u043a \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043d\u0430 \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u043e \u043e \u043f\u043e\u043a\u0443\u043f\u043a\u0435 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 GlobalSign, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0442\u0430\u043d\u0435\u0442 \u0431\u0430\u0437\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0443\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0441\u0440\u0430\u0437\u0443 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0445\u0432\u0430\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044e GlobalSign \u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0430\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183554","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cloudflare ustanavlja overitveni center za brezpla\u010dno razdelitev TLS-certifikatov | ProHoster","description":"Podjetje Cloudflare je napovedalo ustanovitev svojega lastnega overitvenega centra, usmerjenega v zagotavljanje brezpla\u010dnih TLS-certifikatov, ki uporabljajo kriptoalgoritme, odporne na napade kvantnih ra\u010dunalnikov.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cloudflare \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u0434\u043b\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0434\u0430\u0447\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u044b, \u0441\u0442\u043e\u0439\u043a\u0438\u0435 \u043a \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043d\u0430 \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-02T20:54:31+00:00","article:modified_time":"2026-10-02T20:54:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/183554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=183554"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/183554\/revisions"}],"predecessor-version":[{"id":183555,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/183554\/revisions\/183555"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=183554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=183554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=183554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}